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In response to the Final Office Action dated September 7, 2007 ("Office Action") and 
the Advisory Action dated January 29, 2008 ("Advisory Action") (collectively the "Actions"), 
Appellant hereby requests for the reasons below that a panel of examiners formally review the 
legal and factual basis of the rejections in this application prior to the filing of an appeal brief. 
This request is being filed with a Notice of Appeal. 



Appellant traverses and appeals the rejections of claims 1-15, 64 and 65 under 35 U.S.C. 



§ 102(e) in view of U.S. Patent No. 5,892,900 to Ginter et al. ("Ginter") and of claims 16-63 and 
66-67 under 35 U.S.C. § 103(a) in view of Lampson et aL, "Authentication in Distributed 
Systems: Theory and Practice", ACM Transactions on Computer Systems, Vol. 10, No. 4, Nov. 
1992, pgs. 265-310 ("Lampson") and Ginter. 



Rejection under 35 U.S.C. §102(e) in view of Ginter 

Applicant notes for a rejection under 35 U.S.C. § 102(b) "the identical invention must be 
shown in as complete detail as is contained in the ... claim ." (See MPEP § 2131, citing 
Richardson v. Suzuki Motor Co., 868 F.2d 1226, 1236, 9 USPQ2d 1913, 1920 (Fed. Cir. 1989), 
emphasis added). Further, "the elements must be arranged as required by the claim ." (See MPEP 



March 5, 2008 



Sir: 



APPEALED REJECTION 



ARGUMENTS FOR TRAVERSAL 
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§ 2131, citing In re Bond . 910 R2d 831, 15 USPQ2d 1566 (Fed. Cir. 1990), emphasis added). It 
is insufficient to merely identify in a reference each of the words of a claim. Rather, the 
reference must disclose each of the claimed aspects as understood to a person skilled in the art 
having regard to the specification as well as their exact arrangement and interrelationship as 
claimed. Applicant respectfully submits that the present rejections do not meet these 
requirements. 

For example, Applicant submits that the cited portions of Ginter simply do not provide 
any disclosure or teaching (1) of organizing entities within an organizational structure of one of 
more business organizations, (2) that those entities have associated cryptographic capabilities, 
and (3) of organizing those entities as roles through associating corresponding electronic 
representations as recited in claims 1-4, 6-15, 64 and 65. 

The Actions rely on column 303, lines 3-19, paragraphs 1500-1502 and paragraphs 
1865-1866 of Ginter. Applicant respectfully submits that these cited portions of Ginter are silent 
as to the act or step of organizing entities , let alone doing so through associating electronic 
representations of entities with electronic representations of roles. Column 303, lines 3-19 and 
paragraphs 1 865-1 866 of Ginter merely indicate that users in the computer system of Ginter may 
have particular roles; paragraphs 1500-1502 say nothing about, for example, roles. Moreover, 
there is no disclosure that the users referred to in column 303, lines 3-19 and paragraphs 1865- 
1866 of Ginter have associated cryptographic capabilities. While Ginter may disclose 
cryptography in the general sense, it simply is silent as to those users having associated 
cryptographic capabilities. Further, paragraphs 1865-1866 of Ginter merely discuss techniques 
for an attacker of Ginter's system to determine sensitive data and don't disclose that entities 
have associated cryptographic capabilities. 

The mere existence of "modules or subparts" has no logical connection to a method of 
organizing entities as roles (just as, for example, a disclosure of a person has no logical 
connection to organizing a person in an organization as a role of a president). Appropriate 
"modules or subparts" may be organized into roles, but such a method isn't disclosed in the cited 
portions of Ginter (let alone to do so through associating the electronic representations of 
entities with electronic representations of roles). Further, there is no disclosure that the "modules 
or subparts" of Ginter have associated cryptographic capabilities. 

Further, Applicant submits that the cited portions of Ginter fail to disclose upon any 
addition, deletion or modification of an entity, a cryptographic capability, or any of their 
associations, maintaining roles within the organizational structure by adding, deleting or 
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modifying electronic representations of the entities, cryptographic capabilities, roles, or any of 
their associations as recited in claims 1-4, 6-15, 64 and 65. 

The Actions rely on paragraphs 164, 204, 206 and 209 of Ginter. However, these cited 
portions of Ginter merely refer to adding, deleting or modifying completely dissimilar and 
unrelated items to the claimed items, such as software load modules, content control 
information, etc. Those are simply not entities within an organizational structure of one or more 
business organizations, such as, without limitation, employees in a corporation or for that matter 
are cryptographic capabilities of entities, roles of entities, or any of their associations. Even if 
they were, the cited portions of Ginter fail to identify what or how roles are being maintained. 
Clearly, there is nothing about the disclosed "specification" or "control information" in Ginter 
that indicates it is a role, an entity in an organizational structure, a cryptographic capability or 
any of their associations. Further, there is nothing in the cited portions of Ginter that any adding, 
deleting or modifying of software load modules, content control information, etc. in Ginter 
occurs upon any addition, deletion or modification of an entity, a cryptographic capability, or 
any of their associations. Rather, it appears such adding, deleting or modifying simply occurs at 
a user's instruction. See, e.g., paragraph 164 of Ginter. 

Rejection under 35 U.S.C. §103(a) in view of Lampson and Ginter 

Without acknowledging that the cited portions of Lampson disclose or render obvious 
the remainder of claims 16-51 (which Applicant submits the cited portions of Lampson do not) 
or that Ginter and Lampson are properly combinable, Applicant submits that the cited portions 
of Ginter fail to overcome the admitted deficiencies of Lampson with respect to claims 16-51. 

The Actions rely on paragraphs 164, 204, 206 and 209 of Ginter. However, these cited 
portions of Ginter merely refer to adding, deleting or modifying completely dissimilar and 
unrelated items to the claimed items, such as software load modules, content control 
information, etc. Those are simply not entities within a business organization. Rather, they are 
merely computer software components and cannot reasonably be considered an entity within a 
business organization (such as an employee). Moreover, they are simply not characteristics of 
entities within a business organization, or relationships of entities within a business organization 
as recited in and in the context of the claims. Even if the software load modules, control 
parameter data, information or structures, etc. of the cited portion of Ginter were entities within 
a business organization, the cited portions of Ginter would further fail to identify what 
characteristics and/or relationships those alleged entities have, let alone how Ginter discloses 
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changing those characteristics and relationships. At most, Ginter would merely disclose the 
entities and that they may be changed, but does not further identify the characteristics and 
relationships of those entities nor how they are changed. Further, there is nothing in those cited 
portions of Ginter that change of maintained electronic representations of said entities, said 
characteristics, and said relationships occurs upon an addition, deletion or modification of a 
characteristic or relationship of said entities. 

Further, Applicant submits that it does not follow that the mere disclosure in Ginter that 
the VDE system is configurable and modular means that it discloses or teaches change of 
maintained electronic representations of entities within a business organization, or of 
characteristics of such entities, or of relationships of such entities, let alone to do so upon an 
addition, deletion or modification of a characteristic or relationship of such entities. Ginter 5 s 
configurability and modularity is directed to something entirely different such as the adding, 
deleting or modifying software load modules, control parameter data, information or structures, 
etc. Moreover, there is no indication that any configuration or modularity action in Ginter occurs 
upon an addition, deletion or modification of a characteristic or relationship of entities within a 
business organization. 

Without acknowledging that the cited portions of Lampson disclose or render obvious 
the remainder of claims 52-54, 56-63, 66 and 67 (which Applicant submits the cited portions of 
Lampson do not) or that Ginter and Lampson are properly combinable, Applicant submits that 
the cited portions of Ginter fail to overcome the admitted deficiencies of Lampson with respect 
to claims 52-54, 56-63, 66 and 67. 

For example, Applicant submits that the cited portions of Ginter do not disclose or teach 
a maintenance system by which the database, representing entities of a business organization and 
their characteristics, roles and relationships, and the cryptographic capabilities are maintained in 
coordination and by authorized parties assuring the representation of the organization and such 
that the cryptographic capabilities are soundly associated as recited in claim 52. As discussed 
above, the cited portions of Ginter (namely, paragraphs 164, 204, 209 and 306) merely refer to 
adding, deleting or modifying completely dissimilar and unrelated items to the claimed items, 
such as software load modules, control parameter data, information or structures, etc. Those are 
simply not entities within a business organization or their characteristics, roles or relationships. 
Moreover, there is simply no disclosure in Ginter regarding maintaining in coordination a 
database as claimed with cryptographic capabilities as claimed. 
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Thus, none of the cited portions of Ginter would disclose or teach the claimed database, 
let alone a maintenance system to maintain coordination between the database and cryptographic 
capabilities (which is not even referenced in the cited portions). Indeed, there is simply no 
reference in the cited portions of Ginter to entities of a business organization, characteristics of 
entities within a business organization, or relationships of entities within a business organization 
as recited in and in the context of claim 52. Accordingly, the cited portions of Ginter simply 
would not provide any relevant teaching or suggestion to modify Lampson in any way to arrive 
at the claimed invention as they have little to nothing in common. 

The Office Action further refers to column 8, lines 1-7 of Ginter as disclosing a database. 
However, a mere disclosure of a database does not disclose a database as claimed, let alone the 
coordination as claimed with cryptographic capabilities. The cited portion of Ginter is simply 
silent as to the function of the database or how it is used. 

Further, the cited portions of Ginter do not disclose or teach maintenance transactions 
acting within said maintenance system, maintaining a view representing said organization as 
recited in claim 52. For example, the cited portions of Ginter do not disclose maintaining any 
sort of view representing a business organization. As noted, the cited portions of Ginter merely 
disclose a specific computer system for secure handling of information. Ginter is simply not 
directed to a business organization, let alone directed to entities within a business organization 
and the roles of entities within the business organization. Applicant submits that there is just no 
indication that the system of Ginter to modify software load modules, control parameter data, 
information or structures, etc. maintains a view of anything, let alone one representing a 
business organization. 



Therefore, it is respectfully requested that the panel return a decision concurring with 
Appellant's position and eliminating the need to file an appeal brief because there are clear legal 
and/or factual deficiencies in the appealed rejections. 



CONCLUSION 



P.O. Box 10500 
McLean, VA 22102 
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